/*
 * Copyright (c) 2024 Huawei Device Co., Ltd.
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
 
import { native } from 'qvog-dsl';
import { InvokeExpr, Value, InvokeStmt, Variable } from 'qvog-types';
import { QHint } from '~/adapter/Defines';
import { DataFlow, DfgTraverse, HamiltonFlow, TaintFlow } from "~/lib/flow";

const sensitiveFields = [
    // 用户身份信息
    "email",
    "emailAddress",
    "fullName",
    "phoneNumber",
    "socialSecurityNumber",
    "idNumber",
    "passportNumber",
    "dateOfBirth",

    // 认证凭证
    "password",
    "token",
    "apiKey",
    "secretKey",
    "accessToken",
    "refreshToken",
    "sessionId",
    "userId",

    // 财务信息
    "creditCardNumber",
    "bankAccountNumber",
    "transactionId",
    "transactionAmount",
    "billingAddress",
    "paymentMethod",
    "cardNumber",
    "cvv",

    // 位置信息
    "homeAddress",
    "gpsCoordinates",
    "currentLocation",
    "ipAddress",

    // 健康信息
    "medicalRecordNumber",
    "healthCondition",
    "prescriptionDetails",
    "allergies",
    "bloodType",

    // 其他敏感字段
    "motherMaidenName",
    "securityQuestion",
    "securityAnswer",
    "deviceFingerprint",
    "internalState",
    "debugKey",
    "encryptionKey"
];

export default native<QHint>()()
    .match((node: Value): node is Value => {
        return node.stream().any(s => s instanceof Variable && sensitiveFields.includes(s.name))
    })
    .when((node, { native }) => {
        const sinkNodes = native.api.nodes(s => {
            return s instanceof InvokeStmt && s.expression.target === "log";
        }, 'Sink')
        return native.api.exists(node, '', sinkNodes, "Flow", () => new DataFlow());
    })
    .report({table: 'Flow'});
